Lucene search
+L

1 matches found

Drupal
Drupal
added 2014/01/22 12:0 a.m.19 views

SA-CONTRIB-2014-004 - Secure Cookie Data - Faulty Hashing

This module allows for storing data securely in a cookie through implementing the Secure Cookie Protocol. Ability to alter trusted data in the cookie The module did an incorrect comparison of the HMAC value, allowing a bypass of the HMAC verification which allows changing the cookie value. Known...

7AI score
SaveExploits0References14
Rows per page
Query Builder